Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/_CP3e0WLgHreGwKUhpdfEeFss0U.roa
File: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (raw, json)
Hash identifier: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=
Subject key identifier: FC:23:F7:7B:45:8B:80:7A:DE:1B:02:94:86:97:5F:11:E1:6C:B3:45
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 01977D350412A26F5B9DE481DFA7094C4A5D
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/_CP3e0WLgHreGwKUhpdfEeFss0U.roa
Signing time: Tue 17 Jun 2025 09:25:15 +0000
ROA not before: Tue 17 Jun 2025 09:25:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 91.215.148.0/22 maxlen: 24
141.138.216.0/21 maxlen: 24
178.20.56.0/21 maxlen: 24
185.50.208.0/22 maxlen: 24
2a03:5380::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:35:04:12:a2:6f:5b:9d:e4:81:df:a7:09:4c:4a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Jun 17 09:25:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc23f77b458b807ade1b029486975f11e16cb345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:43:b9:31:09:ee:e6:61:03:8c:29:f1:f7:
96:07:7c:1c:84:23:08:0c:a1:cb:56:b3:bf:6a:be:
46:b6:a8:99:1d:0b:2c:fc:ec:51:9f:ac:00:c2:82:
17:47:2b:e4:c9:04:e1:92:da:7f:4b:42:d8:fd:89:
ce:21:0e:3c:1a:82:d0:a6:1b:b8:c7:63:dd:bb:57:
cb:da:d2:76:22:99:4f:e0:36:d8:d6:f8:98:dc:59:
ea:88:ff:f4:39:a5:a5:7e:6b:57:d3:73:ee:db:6f:
dc:0f:9d:99:95:1b:41:08:32:27:0f:96:0f:f8:da:
74:c8:37:21:c5:3b:36:8f:26:66:55:7f:13:db:7b:
de:48:dc:62:f8:15:0f:56:84:85:8e:61:8e:6a:44:
1d:4c:f0:19:8a:f1:e9:31:0a:0c:98:e9:63:28:15:
59:e3:39:3e:9e:27:a0:d3:9d:be:4d:dd:a7:00:0b:
b3:76:67:fc:59:01:48:5f:91:7c:62:4c:6a:dc:4e:
34:61:42:69:de:77:bc:a7:a6:04:b3:c9:a9:98:36:
6e:b7:50:76:42:37:08:10:99:51:e8:35:32:cc:32:
e5:7b:8d:38:08:60:7a:b2:84:4f:e0:2f:96:49:d5:
28:a7:fb:76:f9:fc:45:a3:f3:0e:19:23:97:49:77:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:F7:7B:45:8B:80:7A:DE:1B:02:94:86:97:5F:11:E1:6C:B3:45
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/_CP3e0WLgHreGwKUhpdfEeFss0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.148.0/22
141.138.216.0/21
178.20.56.0/21
185.50.208.0/22
IPv6:
2a03:5380::/32
Signature Algorithm: sha256WithRSAEncryption
8e:0f:14:bd:e9:f3:a1:84:5c:8d:46:14:49:e4:78:e9:10:41:
f9:e1:87:31:7b:3d:df:f9:60:84:b6:7d:b9:15:b2:a0:9f:94:
0f:e3:66:45:c5:42:ee:bb:42:59:57:41:64:b7:fc:f6:ed:59:
85:0f:fb:04:6b:08:c5:9b:1e:54:03:ae:8f:5f:71:b0:27:59:
74:21:3e:3d:54:1f:69:41:69:d8:93:d6:af:04:09:ef:48:69:
21:bb:38:f6:a4:3a:bc:aa:44:22:bd:77:79:8b:c8:5d:e8:53:
3d:2a:d2:16:80:3c:16:d1:91:c5:52:49:0f:b5:de:0c:fa:c0:
47:f1:2f:55:bd:f8:08:7b:78:1a:7b:71:72:ad:c0:3c:3b:37:
44:e5:a8:cf:01:be:de:12:b4:a8:d9:9b:48:1d:f1:f6:be:e9:
87:7f:ab:ea:de:e5:43:fb:d7:71:72:85:92:53:8b:40:27:37:
8d:cb:a9:76:9b:a2:23:c2:09:7b:b1:3c:0a:51:dc:1f:5f:4c:
31:4b:0c:b7:76:92:6e:bb:3c:bb:d2:fa:da:83:28:79:26:af:
77:d8:46:00:ea:40:ba:66:ef:6c:51:76:3f:cf:09:d4:a8:94:
e0:89:23:48:72:6c:50:2a:0c:5c:83:2f:96:84:86:0b:52:1f:
21:86:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:10 2025 by rpki-client